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ABSTRACT 


This  bibliography  cites  selected  books  and  articles  on  computer  security  published 
from  January  1980  through  October  1989.  To  have  been  selected,  an  article  had  to  be 
substantial  in  content  and  have  been  published  in  professional  or  technical  journals, 
magazines,  or  conference  proceedings.  Only  very  substantial  articles  from  the  popular 
or  trade  press  were  included.  English  language  articles  from  foreign  journals  were 
included  as  available.  The  citations  are  listed  under  nine  categories.  A  tenth  category 
of  pre- 1980  publications  is  also  provided,  as  well  as  an  appendix  containing  addresses 
of  all  journals  and  magazines  referenced  in  the  bibliography. 

Key  Words:  access  controls;  auditing;  communications  security;  computer  crime; 
computer  security;  confidentiality;  cryptography;  disaster  recovery;  integrity;  privacy; 
risk  management;  trusted  computing  base. 
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INTRODUCTION 


In  recognition  of  the  critical  need  for  better  dissemination  of  computer  security 
information  throughout  government  and  industry,  the  National  Institute  of  Standards  and 
Technology  (NIST)  has  produced  this  selected  bibliography  of  key  computer  security  literature 
published  from  January  1980  through  October  1989.  This  bibHography  was  compiled  by  Rein 
Turn  of  Rein  Turn  Associates  under  contract  to  NIST. 


The  bibliography  is  organized  into  the  following  10  sections  and  2  appendices: 

1.  General 

2.  Management 

3.  Foundations 

4.  Access  Control 

5.  Trusted  Systems 

6.  Database  Security 

7.  Communication  and  Network  Security 

8.  Cryptography 

9.  Privacy 

10.  Pre- 1980  Publications 
Appendix  A:  Periodicals 
Appendix  B:  List  of  Key  Words 


Citations  in  sections  1  through  9  are  organized  by  subject  matter;  section  10  is  a  listing 
of  pre- 1980  publications.  To  have  been  selected,  an  article  had  to  be  substantial  in  content  and 
have  been  published  in  professional  or  technical  journals,  magazines,  or  conference 
proceedings.  Only  very  substantial  articles  from  the  popular  or  trade  press  were  included. 
EngHsh  language  articles  from  foreign  journals  were  included  as  available. 


right): 


The  individual  citations  have  the  following  structure  (an  example  is  shown  at  the 


Identifier 
Author 
Title 

Journal  title  (or  publishing  house) 
Date  and  page  (or  location  and  year) 
Key  words  (two  or  three) 


AAL-83 

Aalders,  J.C.H. 

"Towards  Standards  in  Computer  Security,"  Proc. 
inP/Sec.  '83.  Stockholm,  1983,  (2:  FAK-83), 
pp.  5-13. 

Key  Words:  guidelines,  policy. 


Each  citation  is  uniquely  identified  by  the  first  letters  of  the  principal  author's  last 
name  (or  the  publishing  organization's  acronym,  if  no  author  is  identified  or  listing  by 
organization  is  more  meaningful)  and  the  last  two  digits  of  the  year  of  publication.  A 
lowercase  letter  following  the  year  serves  to  distinguish  otherwise  identical  citation  identifiers. 


1 


Section  numbers  are  used  to  distinguish  identical  citations  identifiers  from  different  sections 
and  multiple  citations  from  the  same  publication  [e.g.  (2:  NBS-81)  and  (7:  NBS-81)], 

Appendix  A  contains  a  list  of  the  periodicals  from  which  citations  in  this  bibliography 
have  been  taken.  The  list  contains  publisher  and  editor  information  where  appropriate  in  order 
to  assist  the  user  of  this  bibliography  to  obtain  more  information  about  documents  cited. 

Appendix  B  contains  a  list  of  all  the  key  words  used  in  each  of  the  10  sections.  This 
list  will  assist  the  reader  who  would  like  information  on  a  topic  that  spans  more  than  one 
section.  As  an  example,  information  on  viruses  can  been  found  in  each  of  the  first  three 
sections  (General,  Management,  and  Foundations). 
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1.  General 


This  section  cites  general,  mostly  nontechnical  publications  on  computer  threats  and 
vulnerabilities  (including  the  hacker  and  computer  viruses),  the  need  for  computer  security,  and 
other  aspects  of  computer  security. 


AAL-83 

Aalders,  J.C.H. 
'Towards  Standards  in 
Computer  Security,"  Proc. 
IFIP/Sec.  '83.  Stockholm, 
1983.  (2:  FAK-83),  pp.  5-13. 

Key  Words:  guidelines, 
policy. 

AAL-85 

Aalders,  J.C.H., 
I.S.  Herschberg,  and 
A.  Van  Zanten 
Handbook  for  Information 
Security,  North- 
Holland/Elsevier  Science 
Publishing  Co.,  New  York, 
1985. 

Key  Words:  book,  general, 
policy,  guidelines,  techniques. 

ABA-84 

Report  on  Crime,  American 
Bar  Association.  Section  on 
Criminal  Justice,  Washington, 
DC,  1984. 

Key  Words:  book,  crime, 
laws,  policy. 

AGR-83 

Agranoff,  M.H. 
"Achieving  Security 
Awareness:  Tips  and 
Techniques."  Computer 
Security  Journal,  Spring 
1983.  pp.  7-17. 

Key  Words:  awareness, 
guidelines. 


ALA-86 

Alagar,  V.S. 

"A  Human  Approach  to  the 
Technological  Challenges  in 
Data  Security,"  Computers  & 
Security.  December  1986.  pp. 
328-335. 

Key  Words:  awareness, 
policy. 

ALL-85 

Allen,  R.J. 

"Data  Security:  Problems  and 
Remedies,"  Today's  Office, 
April  1985,  pp.  26-27. 

Key  Words:  crime,  threats, 
general,  techniques. 

APR-81 

Crime  Investigation  Manual. 
Assets  Protection  Publishing, 
Madison,  WI,  1981 

Key  Words:  book,  crime. 

ARD-85 

Ardis,  P.M.,  and 
R.M.  Johnson 
"Electronic  and  Crime 
Insurance  in  the  US  and  UK," 
Computer  Fraud  &  Security 
Bulletin,  August  1985.  pp.  1- 
6. 

Key  Words:  crime,  policy, 
international. 

ARN-83 

Amell,  A. 

"On-Site  Hazards,  Off-Site 
Safety,"  Computerworld, 
December  12,  1983,  pp. 
ID/13-24. 


ASS-81 

"An  Atlas  of  Terrorism," 
Assets  Protection,  March/April 
1981,  pp.  26-36. 

Key  Words:  crime,  hackers. 

ATK-85 

Atkins,  W. 

"Jesse  James  at  the  Terminal," 
Harvard  Business  Review, 
July/August  1985 

Key  Words:  crime,  hackers. 

BAC-83 

Backwith,  N. 

"Unique  Approach  to  Security 
Evaluation,"  Computers  & 
Security,  January  1982,  pp.  35- 
40. 

Key  Words:  guidelines,  policy. 

BAI-84 

Bailey.  D. 

"Attacks  on  Computers: 
Congressional  Hearings  and 
Pending  Legislation,"  Proc. 
1984  IEEE  Symp.  on  Sec.  & 
Privacy  (5:  IEE-84).  pp.  180- 
187. 

Key  Words:  crime,  hackers, 
legislation. 

BAI-87 

Baird,  B.J.,  L.L.  Baird,  and 
R.P.  Ranauro, 
'The  Moral  Cracker?," 
Computers  &  Security, 
December  1987,  pp.  471-478. 

Key  Words:  crime,  hackers. 


Key  Words:  threats,  physical. 
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BAI-89 

Bainbridge,  D.I. 
"Hacking  -  The 
Unauthorized  Access  of 
Computer  Systems:  The 
Legal  Implications,"  Modem 
Law  Review.  March  1989, 
pp.  236-245. 

Key  Words:  crime,  hackers, 
legislation. 

BAK-85 

Baker,  R.H. 

The  Computer  Security 

Handbook,  TAB  Books,  Inc., 

Blue  Ridge  Summit,  PA, 

1985 

Key  Words:  book,  general, 
policy,  guidelines,  techniques. 

BAL-82 

Ball.  L.D. 

"Crime,"  Technology  Review, 
April  1982,  pp.  21-30. 

Key  Words:  crime,  pohcy, 
legislation. 

BAL-88 

Ball.  M. 

'To  Catch  a  Thief,"  Security 
Management.  March  1988. 
pp.  72-78. 

Key  Words:  crime,  hackers, 
guidelines. 

BAS-88 

Baskerville,  R. 
Designing  Information 
Systems  Security,  Wiley  & 
Sons,  Somerset,  NJ,  1988 

Key  Words:  book,  guidelines, 
policy,  techniques,  general. 

BAU-84 

Bauder,  D. 

"Electronic  Fimds  Transfer 
Security,"  Proc.  7th  Seminar, 
DoD  Comp.  Sec.  Progr.  (5: 
DOD-84),  1984,  pp.  188-194. 

Key  Words:  vulnerabilities, 
threats,  pwlicy.  guidelines. 


BEA-84 

Beane.  W.F.,  E.R.  Hilton,  and 
B.  Goldstein 

"Computer  Security:  Who  Is 
in  Charge?"  Security  World, 
October  1984,  pp.  42-46. 

Key  Words:  general,  policy. 

BEC-80 

Becker,  J. 

"Rifkin  -  A  Documentary 
History,"  Computer/Laws 
Journal.  Summer  1980,  pp. 
472-720. 

Key  Words:  crime. 

BEC-83 

Becker,  L.G. 
Computer  Security:  An 
Overview  of  National 
Concerns  and  Challenges, 
Report  No.  83-135  SPR, 
Congressional  Research 
Service,  U.S.  Library  of 
Congress,  Washington,  DC, 
February  3,  1983. 

Key  Words:  crime,  policy, 
legislation. 

BEC-83a 

Becker,  H.B. 
Information  Integrity, 
McGraw-Hill,  New  York, 
1983. 

Key  Words:  book,  guidelines, 
policy,  techniques. 

BEC-85 

Becker,  L.G. 

Computer  Abuse  and  Misuse: 
An  Assessment  of  State  and 
Federal  Legislative  Incentives, 
Institute  for  Defense  Analysis, 
Princeton,  NJ,  1985. 

Key  Words:  crime,  policy, 
legislation. 

BEC-85a 

Becker,  L.G. 
"Computer  and  Network 
Security  Policy:  A  Challenge 
to  Organizations,"  Proc. 
MP/Sec.  '85.  Dublin.  1985. 
(2:  GRI-85),  pp.  241-250. 

Key  Words:  policy, 
guidelines. 


BEE-84 

Beebe,  C.A. 

"Plarming  for  Access  Control," 
Security  Management,  January 
1984,  pp.  77-1-. 

Key  Words:  guidelines,  policy. 

BEL-87 

Belford,  P..  and  J.  Quann 
'The  Hack  Attack  Increasing 
Computer  System  Awareness 
of  Vulnerability  Threats," 
AL\A  87-3093,  Proc.  3d 
Aerosp.  Comp.  Sec.  Conf.  (5: 
IEE-87b),  1987,  pp.  155-157. 

Key  Words:  awareness, 
hackers,  threats,  vulnerabilities. 

BEQ-83 

Bequai,  A. 

How  to  Prevent  Crime,  J. 
Wiley  &  Sons.  New  York, 
1983. 

Key  Words:  book,  crime, 
guidelines,  techniques. 

BEQ-83a 
Bequai,  A. 

"What  Can  Be  Done  to  Stem 
The  Rising  Electronic  Crime?," 
The  Office,  November  1983, 
pp.  47-49. 

Key  Words:  crime,  policy, 
guidelines. 

BEQ-84 

Bequai.  A. 

"Lack  of  Ethics  as  a  Cause  of 
Crime."  Computers  and  People, 
May-June  1984,  pp.  7-14. 

Key  Words:  crime,  ethics. 

BER-82 

Bemhard,  R. 

"Breaching  System  Security," 
IEEE  Spectrum,  June  1982, 
pp.  24-31. 

Key  Words:  threats,  crime. 
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BIG-81 

Bigelow,  R.P.  (Ed.) 
Computers  &  the  Laws. 
Commerce  Clearing  House, 
Chicago.  1981. 

Key  Words:  book,  crime, 
guidelines,  laws. 

BIG-81a 

Bigelow,  R.P. 

"The  Queen  vs.  McLaughlin, 
or  Why  the  Criminal 
Sometimes  Goes  Free," 
Computer  Security  Journal, 
Winter  1982,  pp.  131-136. 

Key  Words:  crime,  laws. 

BIG-81b 

Bigelow,  R.P. 

"The  Security  Officer's  Role 
in  Legal  Protection  of 
Software,"  Computer  Security 
Journal.  Winter  1982,  pp.  99- 
107. 

Key  Words:  guidelines, 
policy. 

BLA-84 

Blakney.  S. 

"Crime,"  Computerworld. 
December  26,  1983,  p.  57-I-. 

Key  Words:  crime,  threats. 

BLA-88 

Blatchford,  C. 

"A  Manufacturer's  Approach 
to  the  Security  of  Computer 
Systems,"  Proc.  IFIP/Sec. 
'88.  AustraUa,  1989.  (2: 
CAE-89).  pp.  187-195. 

Key  Words:  awareness, 
guidelines,  policy,  techniques. 

BLO-80 

Bloom,  R. 

"Catching  the  Computer 
Crook,"  Infosystems.  July 
1980.  pp.  30-35. 

Key  Words:  crime, 
guidelines. 


BLO-82 

BloomBecker.  J. 
"International  Crime:  Where 
Terrorism  and  Transborder 
Data  Flow  Meet."  Computers 
&  Security.  January  1982,  pp. 
41-53. 

Key  Words:  crime,  hackers, 
international. 

BLO-83 

Blom.  R..  and  J.-O.  Bruer 
"Office  Information  Systems 
and  Security,"  Proc.  IFIP/Sec. 
'J3,  Stockholm,  1983,  (2: 
FAK-83),  pp.  107-110. 

Key  Words:  guidelines, 
policy. 

BLO-83a 
Bloom,  R. 

"Computers  Don't  Commit 
Crime,  People  Do,"  Data 
Management,  July  1983,  p. 
14. 

Key  Words:  crime. 

BLO-83b 

BloomBecker,  J. 
"Crime  -  Corporate  Coimcel's 
View,"  Crime  Digest,  March 
1983,  pp.  7-10. 

Key  Words:  crime,  laws. 

BLO-83C 

BloomBecker.  J. 
"International  Crime:  A 
Growing  Threat," 
Transnational  Data  Report, 
June  1983.  pp.  219-230. 

Key  Words:  crime,  threats, 
international. 

BLO-84 

Bloombecker,  J. 
"Introduction  to  Crime,"  Proc. 
IFIP/Sec.  '84.  Toronto,  1984, 
(2:  FIN-85),  pp.  423-430. 

Key  Words:  crime,  general. 


BLO-85 

Bloombecker,  J. 
"Computer  Security  for  the 
People,"  Transnational  Data 
Report,  Oct./Nov.  1985,  pp. 
367-370. 

Key  Words:  awareness,  ethics. 

BLO-85a 

Bloombecker,  J. 
Computer-Crime  Laws 
Reporter,  National  Center  for 
Computer-Crime  Data, 
CaUfomia  State  University, 
Los  Angeles,  CA.  1985. 

Key  Words:  book,  crime,  laws. 

BLO-85b 

Bloombecker.  J.J. 
Introduction  to  Crime.  National 
Center  for  Crime  Data,  Los 
Angeles,  CA,  September  1985. 

Key  Words:  book,  crime,  laws. 

BLO-86 

Bloombecker,  J.J. 
Crime,  Computer  Security, 
Computer  Ethics,  National 
Center  for  Crime  Data,  Los 
Angeles,  CA,  February  1986. 

Key  Words:  book,  crime, 
ethivcs,  policy. 

BLO-86a 

Bloombecker,  J.J. 
"New  Federal  Laws  Bolsters 
Computer  Security  Efforts," 
Computerworld,  October  27, 
1986,  p.  53-66. 

Key  Words:  crime,  laws. 

BLO-86b 

Bloombecker,  J.J. 
"Lobbying  for  Protection," 
Computerworld,  August  4, 
1986,  pp.  55-62. 

Key  Words:  crime,  awareness. 

BLO-86C 

Bloombecker,  J.J. 
"Defense  of  Crime  Cases," 
American  Jurisprudence  Trials, 
Vol.  33.  1986.  pp.  1-197. 

Key  Words:  crime,  laws. 
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BLO-88 

Bloombecker,  J. J. 
"Captain  Midnight  and  the 
Space  Hackers,"  Security 
Management.  July  1988,  pp. 
76-82. 

Key  Words:  crime,  hackers. 

BLO-89 

Bloombecker,  J.J. 
'Trends  in  Computer 
Abuse/Misuse,"  Proc.  12th 
Natl.  Comp.  Sec.  Conf.  (5: 
NCS-89),  1989,  pp.  611-614. 

Key  Words:  crime,  threats, 
laws,  guidelines. 

BLO-89a 

Bloombecker,  J.J.  (Ed.) 
Commitment  to  Security, 
National  Center  for  Computer 
Crime  Data,  Santa  Cruz,  CA, 
1989. 

Key  Words:  book,  crime, 
policy,  general. 

BOL-81 

Bologna,  J. 

"The  8 -Factor  Theory  of 
White-Collar  Crime 
Causation,"  Proc.  Comp.  Sec. 
&  Priv.  Symp.,  1981  (1: 
HON-81),  pp.  57-67. 

Key  Words:  crime,  threats, 
guidelines. 

BOL-81  a 

Bologna,  J. 

Crime:  Wave  of  the  Future, 
Assets  Protection  Publishing, 
Madison,  WI,  1981. 

Key  Words:  book,  crime. 

B0L-81b 

Bologna,  J. 

"MOMM's:  A  Taxonomy  of 
Computer-Related  Employee 
Theft,"  Assets  Protection, 
May/June  1981,  pp.  33-36. 

Key  Words:  crime,  threats. 


BOL-86 

Bologna,  J. 

"Computer  Related  Crime: 
The  Who,  What,  Where, 
When,  Why  and  How,  I," 
Data  ProcessinE  & 
Communications  Security. 
Winter  1986.  pp.  19-23. 

Key  Words:  crime,  general. 

BOL-86a 

Bologna,  J. 

"Computer  Related  Crime: 
The  Who,  What,  Where, 
When.  Why  and  How,  U," 
Data  Processing  & 
Communications  Security. 
Spring  1986.  pp.  25-30. 

Key  Words:  crime,  general. 

BOR-85 

Borking,  J.J. 

Third  Party  Protection  of 
Software  and  Firmware, 
North-Holland  PubUshing  Co. 
Amsterdam,  1985. 

Key  Words:  book,  software 
privacy. 

BOS-82 

Bosworth,  B., 
Codes,  Ciphers  and 
Computers:  An  Introduction  to 
Information  Security,  Hayden 
Book  Co.,  Rochelle  Park,  NJ, 
1982. 

Key  Words:  book,  awareness, 
general. 

BOT-86 

Bottom,  N.R.,  Jr.,  et  al. 
"About  the  Security  Degree: 
Are  We  Losing  It  (A 
Discussion),"  Journal  of 
Security  Administration,  June 
1986,  pp.  7-20. 

Key  Words:  general,  policy. 

BRE-86 

Breton,  T.,  and  D.  Beneich 
Softwars,  Holt,  Rinehart, 
Winston,  New  York,  1986. 

Key  Words:  book,  awareness. 


BRO-83 

Brown,  R.A. 

"Crime  and  Computers," 

Criminal  Laws  Journal.  Apml 

1983,  pp.  68-89. 

Key  Words:  crime,  laws. 

BRO-83a 

Browne.  M.W. 

"Locking  Out  The  Hackers." 

Discover.  Novonber  1983.  pp. 

30-40. 

Key  Words:  awareness. 
hackCTs.  crime. 

BUI-84 

Buikema,  C.  et  al. 
"Security  Regulation:  A  State- 
by-State  Update."  Security 
Management,  January  1984. 
pp.  39-48. 

Key  Words:  crime,  laws. 

BUM-84 

Bump,  M.  Jr. 

"A  Primer  on  Software  Piracy 
Cases  in  the  Courts," 
Computers  &  Security,  May 

1984,  pp.  123-134. 

Key  Words:  awareness,  laws, 
software  piracy. 

BUR-88 
Burger,  R. 

Computer  Viruses:  A  High- 
Tech  Disease.  Abacus.  Grand 
Rapids.  MI.  1988. 

Key  Words:  computer  viruses, 
threats,  general. 

BUS-81 

"Computer-Crime  -  The 
Spreading  Danga  to  Business," 
Business  Week,  April  20, 
1981,  pp.  86-91. 

Key  Words:  crime,  threats, 
guidelines. 
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BUS-84 

Buss,  M.DJ.,  and 
L^.  Salemo 
"Common  Sense  and 
Computer  Security,"  Harvard 
Business  Review,  March- 
April  1984,  pp.  112-121. 

Key  Words:  awareness, 
guidelines,  policy,  general. 

BUS-88 

"Is  Your  Computer  Secure?," 
Business  Week,  August  1, 
1988,  pp.  64-70. 

Key  Words:  awareness, 
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2.  Management 
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Appendix  B:  List  of  Key  Words 


This  appendix  contains  a  list  of  all  the  keywords  used  in  each  of  the  sections. 
Section  1:  General 

awareness,  book,  crime,  computer  virus,  Congress,  contingency,  ethics,  general,  government, 
guidelines,  hackers,  integrity,  international,  laws,  legislation,  PC  [personal  computer], 
physical,  policy,  risk,  software  piracy,  techniques,  threats,  virus,  vulnerabilities. 


Section  2:  Management 

auditing,  awareness,  book,  certification,  computer  virus,  control  [access  control],  denial  [of 
service],  general,  government,  guidelines,  hackers,  hardware,  integrity,  management, 
methods  [mechanisms,  procedures],  PC  [personal  computer,  microcomputer],  personnel, 
physical,  policy,  proceedings,  recovery  [operational,  disaster],  requirement,  risk 
[management],  software,  techniques,  theory,  virus  [worm],  vulnerabilities. 

Section  3:  Foundations 

authentication,  capability,  case  [specific  description],  control,  covert  channel,  database, 
discretionary,  flow,  formal,  inference  [non-inference],  integrity,  LAN  [local  area  network], 
methods,  models,  MLS  [multi-level  security],  network  [also  distributed  system],  policy, 
proceedings,  safety,  specification,  take-grant  [specific  access  control  model],  theory,  trusted 
[systems],  verification,  virus. 


Section  4:  Access  Control 

control  [access],  architecture,  authentication  [identification],  book,  capability  [for  access 
control],  case  [case  study],  design,  discretionary,  government,  guidelines,  hardware, 
integrity,  management,  mandatory,  methods,  OS  [operating  system],  passwords,  proceedings 
PC  [personal  computer],  safety,  software,  techniques,  trusted  [system]. 


Section  5:  Trusted  Systems 

architecture,  authentication,  book,  capability,  case  [case  study],  certification,  control,  covert 
channel,  criteria,  cryptography,  denial  [of  service],  design,  discretionary,  general, 
government,  guidelines,  integrity,  kemel,  methods,  MLS,  models,  network,  OS  [operating 
system],  proceedings,  specifications,  software,  TCB  [trusted  computing  base],  threat, 
techniques,  theory,  trusted  [system],  verification. 
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Section  6:  Database  Security 


auditing,  authentication,  case  [case  study,  example],  control  [access  control],  criteria, 
database  [files,  records],  design,  discretionary,  distributed,  encryption,  government, 
guidelines,  inference,  integrity,  kernel,  DBMS  [database  management  system],  mandatory, 
methods,  models,  MLS,  network  [distributed],  policy,  privacy,  proceedings,  relational, 
requirements,  software,  statistical  [databank],  techniques,  theory,  trusted,  verification,  views 
[of  database]. 


Section  7:  Communication  and  Network  Security 

architecture,  auditing,  authentication,  book,  case  [case  study],  controls,  criteria,  crypto 
[cryptography],  DES  [data  encryption  standard],  design,  distributed,  EM  [electronic  mail], 
general,  government,  guidelines,  hardware,  keys  [cryptographic],  LAN  [local  area  network], 
management,  methods,  MLS,  models,  network  [also  distributed  system],  OS  [operating 
system],  OSI  [open  systems  interconnect],  PC  [personal  computer,  terminal],  physical, 
policy,  proceedings,  protocols,  public-key  [cryptography],  requirements,  RSA 
[Ri vest-Shamir- Adleman  public-key  algorithm],  software,  standards,  techniques,  threats  [also 
covert  channels],  trusted  [system],  verification  [also  assurance],  vulnerabilities. 


Section  8:  Cryptography 

algorithms,  analysis  [also  crypto-analysis],  authentication  [identification],  book,  check-sum, 
codes,  complexity,  DES  [data  encryption  standard],  design,  evaluation,  hardware,  integrity, 
keys  [cryptographic  keys,  management],  knapsack  [public-key  algorithm],  methods, 
proceedings,  protocols,  public-key  [cryptographic  method],  oblivious  [transfer  protocol], 
one-way  [functions],  poUcy,  random,  RSA,  research,  signatures  [digital],  software, 
techniques,  theory,  threats,  trap-door  [functions],  verification,  vulnerabilities,  zero 
[zero-information  protocol]. 

Section  9:  Privacy  ("privacy"  is  implicit  in  all  entries). 

analysis,  book,  case  [case  study],  confidentiality.  Congress,  credit  [data],  criminal  [justice 
records],  databank,  design,  EFTS  [electronic  funds  transfer  system],  employment  [records], 
FOI  [freedom  of  information],  foreign  [countries  other  than  the  U.S.],  general,  government, 
guidelines,  identifier,  laws  [legislation],  management,  matching,  medical  [records],  oversight 
[of  laws],  PA  [U.S.  Privacy  Act  of  1074],  proceedings,  profiling,  protection  [of  rights], 
records,  requirements,  rights  [individual],  social  [sciences],  statistical  [data,  databanks], 
surveillance,  threats,  TDF  [transborder  dataflow],  use. 
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